CVEs published in March 2024
3,385 vulnerabilities, 290 critical, 8 exploited.
- hasthemes ht easy ga4, htplugins ht easy ga4 – google analytics wordpress plugin, hasthemes ht easy ga4 \(google analytics 4\) +2 moreHT Easy GA4 – Google Analytics WordPress Plugin <= 1.1.5 - Missing Authorization to Unauthenticated GA4 Email Update5.3 Medium
- themeisle orbit fox, orbit fox: duplicate page, menu icons, svg support, cookie notice, custom fonts & more +1 moreOrbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget6.4 Medium
- ultimatemember login, registration, ultimate member – user profile, registration, login, member directory, content restriction & membership plugin +5 more +7 moreThe Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction &...9.8 Critical
- fortra filecatalyst, filecatalyst direct +1 moreReflected Cross-Site Scripting (XSS) in FileCatalyst Direct 3.8.8 and earlier7.2 High
- fortra filecatalyst, filecatalyst direct +1 morePath Traversal in FileCatalyst Direct 3.8.8 and Earlier5.3 Medium
- fortra filecatalyst, filecatalyst workflow +1 moreRemote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 1149.8 Critical
- jfrog artifactoryJFrog Artifactory Cross-Site Scripting8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenfsd: fix RELEASE_LOCKOWNER5.5 Medium
- linux, linux kernel +1 morefirmware: arm_scmi: Check mailbox/SMT channel for consistency4.7 Medium
- bdthemes prime slider – addons for elementor, prime slider +1 morePrime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget6.4 Medium
- bdthemes prime slider – addons for elementor, prime slider +1 morePrime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget6.4 Medium
glibcopenSUSESecurity update for glibcNo score- movistar es wld71-t1 firmware, router movistar 4g +1 moreCommand injection vulnerability in Movistar 4G router7.8 High
- movistar router movistar 4gCross-Site Request Forgery vulnerability in Movistar 4G router6.5 Medium
- movistar es wld71-t1 firmware, router movistar 4g +1 moreUnprotected Primary Channel vulnerability in Movistar 4G router8.8 High
- red hat build of quarkus, build of quarkus 3.2.11.final +1 moreQuarkus: information leak in annotation3.5 Low
- ultimate member registration, ultimatemember ultimate member – user profile, registration, login, member directory, content restriction & membership plugin, ultimate member +2 moreUltimate Member <= 2.8.3 - Unauthenticated Stored Cross-Site Scripting7.2 High
- ibm maximo application suite, maximo asset management +1 moreIBM Maximo Application Suite information disclosure3.7 Low
- ibm maximo application suite - maximo mobile for eam, maximo mobile for eam +1 moreIBM Maximo Application Suite information disclosure5.1 Medium
- ibm maximo asset management, maximo application suite +1 moreMaximo Asset Management cross-site scripting6.4 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager cross-site scripting5.4 Medium
- wago controller bacnet ms/tp, controller bacnet/ip, ethernet controller 3rd generation +1 more +3 moreWago: Improper Neutralization of Input During Web Page Generation in multiple devices5.4 Medium
- wago 750-352 firmware, 750-829 firmware, 750-831 firmware +11 more +13 moreWago: Buffer Copy without Checking Size of Input in wbm of multiple products8.8 High
opensslUbuntuopenssl updateNo score- toyoko inn it solution co., ltd. inn official app for android, inn official app for ios, toyoko inn inn +2 moreThe Toyoko Inn official App for iOS versions prior to 1.13.0 and Toyoko Inn official App for...4.8 Medium
- intumit smartrobotIntumit SmartRobot - Use of Hard-coded Cryptographic Key9.8 Critical
- i13websolution team circle image slider with lightbox, continuous image carosel with lightbox +1 moreThe Team Circle Image Slider With Lightbox plugin for WordPress is vulnerable to Cross-Site...5.3 Medium
- heimavista epage, rpage +1 moreHeimavista Rpage and Epage - Broken Access Control5.3 Medium
- codecabin wp go maps, wpgmaps wp go maps (formerly wp google maps) +1 moreWP Go Maps (formerly WP Google Maps) <= 9.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- codecabin wp go maps, wpgmaps wp go maps (formerly wp google maps) +1 moreWP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.3 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via Photo...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...6.3 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via /dede...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...5.4 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...8.8 High
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via ...5.4 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...6.1 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...5.5 Medium
- dedecmsDedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the...8.8 High
- piwigoA Cross Site Scripting vulnerability exists in Piwigo before 14.3.0 script because of missing...5.4 Medium
- Show moreLoading…